2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry

General

Target
2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry
Size 79KB
Sample260814-16r33san21
SHA256 640d6dd6e56f580a73cd24ab9455f4f81125f959d348d4b83d297ff3e827502a
MD5 17995327e673a3cb805c601b9ce8a9eb
SHA1 4ed6a901d381041ebdbbe2a46fa814eb8a5516b6
SHA512 3250515e1dde2a531e1bb16a9d38608d48e0f38eb7bad63a8d9ea62fd6a8b25117ec34235a0e8e2c8fe844419edb79702b99a49c9a6b799ecc48af72c4b04f00
SSDEEP 1536:PAoDNEJeKAYfXrhNLPg10iRvwfVcafh6G0P0Ra+8QSW1G:vDNEJe67hdg10ilwfVcafh6R0Ra+8OQ
TLSH
T14D83CFF8665D0D32E7A1C13FC7BE5ADDFA91D085E130ACD66AB0DA7108712A7D01F21A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry

File Explorer

2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry

.exe 79KB

2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry

IMPHASH 1630d655563ffd9d2cdaa667643e3218
SHA256 640d6dd6e56f580a73cd24ab9455f4f81125f959d348d4b83d297ff3e827502a
MD5 17995327e673a3cb805c601b9ce8a9eb
SHA1 4ed6a901d381041ebdbbe2a46fa814eb8a5516b6
SHA512 3250515e1dde2a531e1bb16a9d38608d48e0f38eb7bad63a8d9ea62fd6a8b25117ec34235a0e8e2c8fe844419edb79702b99a49c9a6b799ecc48af72c4b04f00
SSDEEP 1536:PAoDNEJeKAYfXrhNLPg10iRvwfVcafh6G0P0Ra+8QSW1G:vDNEJe67hdg10ilwfVcafh6R0Ra+8OQ
TLSH
T14D83CFF8665D0D32E7A1C13FC7BE5ADDFA91D085E130ACD66AB0DA7108712A7D01F21A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11711

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

FindWindowA SendMessageA

advapi32

ChangeServiceConfig2A RegOpenKeyA RegQueryValueExA RegCloseKey RegSetValueExA RegCreateKeyExA SetServiceStatus StartServiceA CloseServiceHandle ChangeServiceConfigA OpenServiceA OpenSCManagerA RegisterServiceCtrlHandlerA StartServiceCtrlDispatcherA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv _tell _initterm _acmdln exit _XcptFilter _exit atoi _open _write _close _lseek _eof _read __CxxFrameHandler ??2@YAPAXI@Z ??3@YAXPAX@Z free malloc fopen fwrite fclose memcpy localtime strftime time srand rand strncpy strchr strcmp sprintf memset sscanf strcpy strlen strcat _stricmp __getmainargs __setusermatherr

kernel32

DuplicateHandle GetStartupInfoA OpenEventA GetCurrentProcessId CreateToolhelp32Snapshot Process32First Process32Next GetModuleHandleA HeapAlloc VirtualAllocEx ReadProcessMemory OpenProcess lstrcmpiA GetCurrentProcess GetVersion CreateFileA CloseHandle GetModuleFileNameA VirtualProtect DeleteFileA _lcreat _lwrite _lclose GetProcessHeap HeapFree BeginUpdateResourceA FindResourceA LoadResource LockResource SizeofResource UpdateResourceA EndUpdateResourceA SetFileAttributesA CopyFileA CreateProcessA WinExec SetFileTime Sleep GetLastError FreeLibrary LoadLibraryA GetProcAddress CreateEventA WaitForSingleObject GetWindowsDirectoryA SetCurrentDirectoryA

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_17995327e673a3cb805c601b9ce8a9eb_elex_wannacry

user32

advapi32

msvcrt

kernel32

generic